Prisma AIRS Runtime Security

Unit 42 locates Qwen3-4B's refusal template in 50 of 350,208 neurons

Perturbation probing needs the weights, which puts the finding on teams running open-source checkpoints rather than on API tenants. The same 50-neuron toolkit that breaks a refusal template also repairs other behavior.